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DD/A 81-1136/9 


P| RECISTRY 


MEMORANDUM FOR: General Counsel a ee _ tS. 
FROM: Harry E. Fitzwater 
Deputy Director for Administration 
SUBJECT: Accounting of Disclosures of Records Made to 
Persons or Entities Outside the CIA 
REFERENCE: OGC Multiple Addressee Memo, dtd 26 May 81, 


same Subject (0GC 81-04296) 


Attached are DDA Office responses to the referent memorandum. If you have 


any questions or require clarification, please contact my Office Directors 


directly. 
/s/ Willem N. Hert 
Harry E. Fitzwater 
Attachments 
AEOQ/DDAA___|:ba(Sdun81) 


0 - Adse w/atts 

- D/OC w/o atts 
D/ODP w/o atts 
D/OF w/o atts 
D/OIS w/o atts 
D/OL w/o atts 
D/OMS w/o atts 
D/OS w/o atts 
D/OTE w/o atts 

DDA Subj w/atts 
DDA Chrono w/o atts 
HEF w/o atts 

E® Chrono w/o atts 
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SUBJECT : Accounting of Disclosures of Records Made to 
Persons or Entities Outside the CIA 


1. The Office of Security does not unilaterally release 
information to individuals or entities outside of the U.S. 
Government. Freedom of Information Act, Privacy Act and 
E.0O. 12065 actions are channeled instead through the Information 
and Privacy Division of Office of Information Services. 

Likewise, OGC, OLC and the Publications Review Board serve as the 
OS conduit for matters arising from litigation, congressional 
inquiries, Executive Branch actions and manuscript reviews. 


2. The Office of Security (0S) does release investigative 
data directly to other Government agencies through both the 
Liaison Section and the Certification Section (CD/6) of the 
Personnel Security and Investigations Directorate (PSI). The 
Security Analysis Group of PSI performs a similar function for 
counterintelligence information. All three units maintain manual 
records of disclosures outside of OS which include the date, 
nature and purpose of each disclosure as well as the name and 
address of each person or entity to whom such a disclosure is 
made. OS anticipates that an automated record of these 
disclosure actions will be developed circa 1985. 


3. The third element of the Office of Security which 
routinely transmits information outside is the Special Security 
Center (SSC) of the Policy and Management Directorate. At 
present, the SSC's C data base contains names and 
identifying data on approximately 168,000 individuals authorized 
access to Sensitive Compartmented Information (SCI). As the 
Office of General Counsel is aware from recent meetings with 


ees Chief, Special Security Center, there is no 
practical way to record" and maintain an audit trail of all 
disclosures from r 4C outside CIA, either for five years 


or the life of t d. To cite one example of the 
difficulty, SSC produces 85 hard copy printouts and 100 
microfiche both for CIA and the Intelligence Community every 
month. There is simply no logical way for OS to accurately 
record how often the Army, for example, consults these print- 
outs. Yet this would appear to be a "disclosure outside CIA" as 
defined by OGC. Even if it were possible to build an electronic 
audit trail to record every 4C transaction, SSC's| 
experience suggests that in time the audit trail wou ecome STAT 
larger than the data base. Since OGC has been in direct contact 
with OS to find a mutually acceptable solution to this particular 
aspect of the OS disclosure question, this memorandum will not 
attempt to resolve the issue. 
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